#Log iptables stuff to iptables log
kern.3 /var/log/iptables
=============================
i did it like just like stlivingston said.
but when i restart syslog, there is still nothing in file iptables. and all the log are still put into /var/log/messages

and to toplanxue: thanks ! i have added ur icq account.